Skip to content
OpenAdvisories

Vendor

Universal Software

9 known vulnerabilities.

Products

FlexCity/Kiosk 3 FlexCity 3 UKBS 1 FlexWater Corporate Water Management 1 E-Municipality 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2026-7187

    Improper Authentication in Universal Sotware's UKBS

    Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects UKBS: through 28072026. NOTE: The vendor was contacted and it was learned that the p…

    Universal Software UKBS
  • High 8.3
    CVE-2026-1619

    IDOR in Universal Sotware's FlexCity/Kiosk

    Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

    Universal Software FlexCity/Kiosk
  • High 8.8
    CVE-2026-1618

    Admin Account Takeover in Universal Sotware's FlexCity/Kiosk

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

    Universal Software FlexCity/Kiosk
  • High 8.8
    CVE-2025-14349

    Business Logic Error in Universal Software's FlexCity/Kiosk

    Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc. FlexCity/Kiosk allows Accessing Functionality Not Properly Constrained by ACLs, Privilege Escalation. This issue affects FlexCity/Kios…

    Universal Software FlexCity/Kiosk